Industrial Network Security Engineer

Position Title: Industrial Network Security Engineer
Location: Houston, Tx
Pay Rate: $90/hr (+benefits)
Assignment Length: 9-month W2 Contract
Schedule: Mon-Fri (8am-5pm)
Industry: Industrial Chemicals
*****************
POSITION OVERVIEW
The Global Infrastructure & Operation Department (GIO) was created to enable high speed execution of the Group’s IT transformation projects and to run global services.
GIO is part of the Air Liquide IT legal entity. It delivers infrastructure services to our BIS (Business Information System) customers worldwide.
The Americas Hub team within GIO is responsible for ensuring the delivery of all GIO services to its customers across all the Americas (through the 3 Clusters: North America, Latin America, Airgas) and their respective Entities, encompassing more than 25,000 employees.
Within the GIO entity, Operational Technology in the Americas Hub enables efficient management and control of primary industrial sites by supporting reliable and continued data flow from / to the sites and securing remote access for the Operations Command Center (OCC) and hundreds of users to the sites.
Services include OCC support, OCC system management, industrial remote system management, industrial remote access security, industrial onsite firewall, and industrial security monitoring. Within the Operational Technology Security, the mission of the Industrial Network Security Engineer is to maintain a high level of expertise and performance/availability on security solutions for OCC system management and industrial remote system management. These solutions are primarily based upon Palo Alto firewalls, Client/Aruba switches, BeyondTrust/Bomgar PRA.
The Industrial Network Security Engineer will act as Level 3 for supporting incident/problems processes. The geographical focus of this role is the Americas Hub however with the ability to foster collaboration with Global Operational Technology teams across the Air Liquide Hub’s in order to promote convergence and improvement of standards, processes and best practices.
This position will report to the Operational Technology Director in the Americas Hub.
Responsibilities
Innovation Management and Service strategy contribution

• Have the knowledge of the different technical components of the solutions (from hardware to software)
• Set-up & follow the action plan to close & anticipate vulnerabilities
• Understand and document the technical requirements for new services or service enhancements
• Advise on technology decisions & provide service implementation guidelines
• Review & provide input on proposals from an architectural perspective, including feasibility, technical viability
• Contribute to realize technical implementation relevant to support the strategy of OT and its Roadmap

Solution design and implementation

• Assist in designing the overall solution
• Ensure that required capabilities for service development are supported
• Lead effort to implement the solution across the different projects
• Lead effort to test, debug, performance analyze and document components around the domain of expertise
• Write technical documentation and procedures

Operations and delivery

• Administration/management and monitoring of the platforms, conducting daily technical administrative work to ensure the availability, stability and security of the platforms
• Support major Operational Technology projects
• Create procedures/scripts on system implementation and backups
• Monitoring logs and alerts of various sites, create automatic reports
• Specify/evaluate system/server requirements
• Adhere to Air Liquide ITIL change management process

L3 Support and problem management

• L3 Troubleshoot, root cause analysis on the major incidents/problems
• Coordinate problem resolution between teams inside and outside of the OT team
• Produces and maintains operational procedures
• Contribute to the problem management and Continuous Improvement processes around the specific platforms. This does include strong contributions with knowledge management (procedures, knowledge articles, etc, ....)
• Overtime may be required to meet project deadlines or to work on Critical Incidents Competencies and Profile

EXPERIENCE
Education Requirements

• Bachelor’s degree in Computer Science or IT security or other relevant area (or equivalent experience)
• CISSP, GRID, GICSP, or similar certifications are a plus

General Requirements

• 3 to 7 years of experience with at least 3 with Network Security and 2 with Palo Alto firewalls

Knowledge and know-how specific to the position

• Knowledge on architecture/design/implementation/support of Palo Alto firewalls, Client/Aruba switches, Solarwinds, Bomgar/SIRA, DNS, SMTP, Splunk, Active Directory
• Proven experience including hands-on capacity for troubleshoot and monitor with Palo Alto firewalls, Client/Aruba switches, Bomgar/SIRA, DNS, SMTP
• Understanding of the generated logs and security architectures
• Good knowledge of standard protocols (SMTP, LDAP, Kerberos, SNMP ...)
• Good knowledge of Windows / Linux architectures
• Knowledge of AWS security and/or industrial IT security would be a plus
• Familiarity with fundamental networking/distributed computing environment concepts; ability to configure file sharing (NFS/SAMBA or Windows); ability to query DNS records.
• Strong Knowledge of Network Design/Implementation.
• Familiar with principles, practice of system configuration management
• Ability to troubleshoot and support technical issues both remotely and on-site using standard tools and techniques (wireshark, nmap, powershell, event logs, netstat, ping, putty, ...)
• Understanding authentication/authorization processes in use at the site, local and network resources and resource sharing
• Ability to design architecture and document procedures
• Good understanding of service management tools for event management, provisioning, and monitoring
• Experience with ITSM tool with a preference for Service Now
• Fluency in English is mandatory in a multicultural environment. French or Spanish is a Plus

Critical competencies

• Able to think creatively & exploit opportunities
• A demonstrated ability in successful problem-solving and management of multiple tasks/priorities.

Ability to effectively manage a crisis situation (technical problem)

• Strong interpersonal and communication skills
• Listening and dialogue to understand needs and problems encountered by users, ability to act as a vendor liaison, make presentations to customers or client audiences
• Highly efficient written skills (documenting standards, process and procedure guides, runbooks, ability to write purchase justifications, etc, ...)
• Strong Organizational Skills and Standardization
• Technical transition & documentation skills. Qualitative and quantitative analytical skills with ability to collect and correlate information and data
• Strong ability to learn; follow instructions well
• Strong ability to work alone (Independent problem-solving, self-direction, autonomy and organization in order to better manage its perimeter) as well as on a team

Physical Requirements
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Spends 70% of the time sitting & 30% of the time either standing or walking while in the office.
• Occasionally stoops, kneels, crouches, climbs, balances, crawls, & reaches.
• Oral and auditory capacity enabling interpersonal communication as well as communication through automated devices such as the telephone.
• Visual capacity enabling frequent use of computer equipment.
• Ability to lift 25 lbs

*****************
Reference #ALUSJP00004836
#ZR